registry / ct-answer-designer / 1.1.7
ct-answer-designer@1.1.7
Vue3工单组件库，包含PC端和移动端工单组件
AI Security Review
scanned 8d ago · by lpm-firewall-aiThe reported beacon is FormCreate licensing telemetry and sends host and license identifiers to the matching FormCreate service. Form content is sent only after an explicit AI chat action, so the inspected source does not establish malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Bundle loading activates a sampled FormCreate licensing ping; the AI request requires the user to enter a prompt and click send.
Impact
The inspected behavior discloses licensing identifiers during sampled use and sends form content only through the user-invoked AI feature; no credential theft or automatic transfer of application records was found.
Mechanism
The ping encodes the current host and configured FormCreate license for the FormCreate service. The AI feature sends the prompt and form design to a configurable API, defaulting to FormCreate's service.
AI rationale
The reported beacon is FormCreate licensing telemetry and sends host and license identifiers to the matching FormCreate service. Form content is sent only after an explicit AI chat action, so the inspected source does not establish malicious behavior.
Evidence
package.jsondist/ct-answer-designer.umd.jsdist/ct-answer-designer.es.jsdist/ct-answer-designer-wc.es.jsdist/ct-answer-designer-wc.umd.jsdist/ct-answer-designer-sdk.es.jsdist/ct-answer-designer-sdk.umd.jsdist/ct-answer-designer-sdk.iife.jsfcDesignerPro/dist/index.es.jsfcDesignerPro/dist/index.umd.jsfcDesignerPro/dist/pc/index.es.jsfcDesignerPro/dist/pc/index.umd.jsfcDesignerPro/dist/render/element-plus/form-create.es.jsfcDesignerPro/dist/render/element-plus/form-create.umd.jsfcDesignerPro/dist/render/vant/form-create.es.jsfcDesignerPro/dist/render/vant/form-create.umd.js
Network endpoints2
api.form-create.com/h.png?u=api.form-create.com/ai/v1/chat/form
Decision evidence
public snapshotAI called this Clean at 87.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json routes consumers to the reviewed bundles and defines only a prepublishOnly build hook.
- The bundles repeat a FormCreate licensing ping that samples qualifying browser contexts and sends the current host and configured license value to api.form-create.com.
- The ping appears alongside FormCreate licensing text and is limited to licensing identifiers; no credentials or application records are sent by it.
- The AI feature sends the entered prompt and current form design only after the user clicks send, using a configurable API that defaults to FormCreate's service.
- dist/style.css is stylesheet content.
Evidence against
Behavioral surface
EnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
5 flaggeddist/ct-answer-designer.umd.jsView file
49L50: err: ${i}`);return}}return t}const Lm=u.defineComponent({name:"DataTable",emits:["sortChange","handleClick","currentChange"],props:{column:{type:Array,default:()=>[]},globalDataKey...
L51: * Signature Pad v5.1.1 | https://github.com/szimek/signature_pad
High
Base64 Obscured Url
Source decodes a Base64-obscured HTTP endpoint at runtime.
dist/ct-answer-designer.umd.jsView on unpkg · L491(function(He,u){typeof exports=="object"&&typeof module<"u"?u(exports,require("vue"),require("element-plus"),require("axios"),require("vant")):typeof define=="function"&&define.amd...
L2: `),function(f){if(l=f.indexOf(":"),a=n.trim(f.substr(0,l)).toLowerCase(),s=n.trim(f.substr(l+1)),a){if(c[a]&&i.indexOf(a)>=0)return;c[a]=a==="set-cookie"?(c[a]?c[a]:[]).concat([s])...
L3: QueryAppInfoByAppID(appId: $appId, responseType: $responseType, redirectUrl: $redirectUrl) {
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/ct-answer-designer.umd.jsView on unpkg · L1dist/ct-answer-designer-sdk.iife.jsView file
Findings
1 Critical3 High3 Medium6 Low
CriticalHardcoded Runtime Data Exfiltrationdist/ct-answer-designer-sdk.iife.js
HighBase64 Obscured Urldist/ct-answer-designer.umd.js
HighSemantic Analysis Limiteddist/ct-answer-designer-sdk.es.js
HighPrevious Version Dangerous Deltadist/ct-answer-designer-sdk.es.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/ct-answer-designer.umd.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to ct-answer-designer@1.1.7.
See all versions of ct-answer-designer for other recorded verdicts.
- Review the evidence and your use of ct-answer-designer@1.1.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.